GitHub Actions 739895d81e fix(security): resolve CrowdSec startup and permission issues ...

Fixes CrowdSec not starting automatically on container boot and LAPI
binding failures due to permission issues.

Changes:
- Fix Dockerfile: Add charon:charon ownership for CrowdSec directories
- Move reconciliation from routes.go goroutine to main.go initialization
- Add mutex protection to prevent concurrent reconciliation
- Increase LAPI startup timeout from 30s to 60s
- Add config validation in entrypoint script

Testing:
- Backend coverage: 85.4% (✅ meets requirement)
- Frontend coverage: 87.01% (✅ exceeds requirement)
- Security: 0 Critical/High vulnerabilities (✅ Trivy + Go scans)
- All CrowdSec-specific tests passing (✅ 100%)

Technical Details:
- Reconciliation now runs synchronously during app initialization
  (after DB migrations, before HTTP server starts)
- Maintains "GUI-controlled" design philosophy per entrypoint docs
- Follows principle of least privilege (charon user, not root)
- No breaking changes to API or behavior

Documentation:
- Implementation guide: docs/implementation/crowdsec_startup_fix_COMPLETE.md
- Migration guide: docs/implementation/crowdsec_startup_fix_MIGRATION.md
- QA report: docs/reports/qa_report_crowdsec_startup_fix.md

Related: #crowdsec-startup-timeout

2025-12-23 01:59:21 +00:00

..

cerberus_live_logs_qa_report.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

ci_failure_diagnosis.md

fix: enhance LAPI readiness checks and update related UI feedback

2025-12-15 07:30:35 +00:00

compliance_qa_report.md

chore: implement instruction compliance remediation

2025-12-21 04:08:42 +00:00

crowdsec_app_level_config.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

crowdsec_bouncer_field_investigation.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

crowdsec_final_validation_20251215.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

crowdsec_final_validation.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

crowdsec_fix_deployment.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

crowdsec_integration_summary.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

crowdsec_migration_qa_report.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

crowdsec_production_ready_20251215_205500.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

crowdsec_trusted_proxies_fix.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

crowdsec_validation_final.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

crowdsec-preset-fix-summary.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

crowdsec-preset-pull-apply-debug.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

definition_of_done_report.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

HOTFIX_CROWDSEC_INTEGRATION_ISSUES.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

HTTP_HEADER_SCAN.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

implementation_notes.md

Add ImportSuccessModal tests, enhance AuthContext for token management, and improve useImport hook

2025-12-12 00:05:15 +00:00

precommit_fix_verification.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

precommit_performance_diagnosis.md

fix: remove invalid trusted_proxies structure causing 500 error on proxy host save

2025-12-20 05:46:03 +00:00

qa_agent_skills_migration.md

feat: migrate scripts to Agent Skills following agentskills.io specification

2025-12-20 20:37:16 +00:00

qa_crowdsec_frontend_coverage_report.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

qa_crowdsec_implementation.md

Enhance documentation and testing plans

2025-12-14 02:45:24 +00:00

qa_crowdsec_lapi_availability_fix.md

fix: enhance LAPI readiness checks and update related UI feedback

2025-12-15 07:30:35 +00:00

qa_crowdsec_startup_test_failure.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

qa_crowdsec_toggle_fix_summary.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

qa_final_crowdsec_validation.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

qa_i18n_report.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

qa_race_and_test_failures_2025-12-12.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

qa_report_bulk_apply_headers.md

feat: add security header profiles to bulk apply

2025-12-20 15:19:06 +00:00

qa_report_capi_fix.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

qa_report_crowdsec_architecture.md

fix: enhance LAPI readiness checks and update related UI feedback

2025-12-15 07:30:35 +00:00

qa_report_crowdsec_markdownlint_20251212.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

qa_report_crowdsec_startup_fix.md

fix(security): resolve CrowdSec startup and permission issues

2025-12-23 01:59:21 +00:00

qa_report_crowdsec_verification.md

fix(crowdsec): resolve non-root container migration issues

2025-12-22 04:03:04 +00:00

qa_report_docker_tag_fix_pr421.md

fix: use PR number instead of ref_name for Docker image tags

2025-12-17 20:00:44 +00:00

qa_report_geoip_v2.md

fix: enhance LAPI readiness checks and update related UI feedback

2025-12-15 07:30:35 +00:00

qa_report_i18n.md

fix: remove invalid trusted_proxies structure causing 500 error on proxy host save

2025-12-20 05:46:03 +00:00

qa_report_issue20_security_headers.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

qa_report_proxy_host_update_fix.md

fix: remove invalid trusted_proxies structure causing 500 error on proxy host save

2025-12-20 05:46:03 +00:00

qa_report_rate_limiting_20251212.md

Fix Rate Limiting Issues

2025-12-12 19:21:44 +00:00

qa_report_sidebar_ui.md

feat: improve sidebar and header UX with scrollable navigation and fixed header

2025-12-21 21:04:13 +00:00

qa_report_standard_proxy_headers.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

qa_security_headers_fix_2025-12-18.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

qa_security_weekly_workflow.md

feat: add weekly security workflow implementation and documentation

2025-12-14 02:03:38 +00:00

qa_summary_sidebar_ui.md

feat: improve sidebar and header UX with scrollable navigation and fixed header

2025-12-21 21:04:13 +00:00

qa_test_coverage_audit.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

qa_uiux_testing_report.md

Enhance documentation and testing plans

2025-12-14 02:45:24 +00:00

rate_limit_fix_summary.md

Enhance documentation and testing plans

2025-12-14 02:45:24 +00:00

rate_limit_test_status.md

fix: enhance LAPI readiness checks and update related UI feedback

2025-12-15 07:30:35 +00:00

security_headers_bug_fix_summary.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00

security_headers_trace.md

fix: add missing field handlers in proxy host Update endpoint

2025-12-20 01:55:52 +00:00